Remote Code Execution Vulnerability in Microsoft Power Automate

CVE-2025-21187

What is CVE-2025-21187?

The Microsoft Power Automate vulnerability allows an attacker to execute arbitrary code on the host machine, posing serious security risks for users. This vulnerability can potentially be exploited via malicious workflows or payloads, enabling unauthorized access to sensitive data or critical systems within an organization. Users are advised to apply available patches and review their Power Automate configurations to ensure compliance with security best practices.

References